Re: *Reminder of the* L-Root IPv6 address renumbering

2016-03-22 Thread Charles Swiger
Hi-- On Mar 22, 2016, at 9:44 AM, Bob Harold wrote: [ ... ] > I appreciate the announcement of the change ahead of time, but I don't feel > like it is safe to update my root hints file based on an email, which could > be spoofed. It's not that I don't trust you, but someone could spoof your >

Re: Using bind and ad blocking

2016-02-05 Thread Charles Swiger
On Feb 5, 2016, at 6:09 PM, Noel Butler wrote: > Why point them to an IP at all, just use TTL and SOA , no A no nothing else. > > They'll get NXDOMAIN when trying to look it up, problem solved. One might point such domains to a local webserver which has been configured to reply to all image req

Re: Log output questions

2015-08-07 Thread Charles Swiger
On Aug 7, 2015, at 12:48 PM, Dimitri Yioulos wrote: > Hello, all. > > I’m pretty new to BIND, and am tasked with monitoring several BIND server. A > script is in place that runs hourly, via cron, looking for any anomalies in > named.log. Here’s the essence of the script: > > grep -i -E ':

[OT] Re: configuration error in lists.isc.org

2015-08-06 Thread Charles Swiger
On Aug 6, 2015, at 4:25 PM, Heiko Richter wrote: > Whenever I post something to the list (I'm not using SMTP, I'm using a > usenet server to post to comp.protocols.dns.bind), my postmaster > address receives DMARC notifications from list members that have > employed this wonderful protocol on thei

Re: servfail only for a zone

2015-07-13 Thread Charles Swiger
On Jul 13, 2015, at 10:34 AM, Lucio Crusca wrote: [ ... ] > Yes the zone failed to update, I know because if I raise the seqno @ns1, it > tries to update and it keeps failing. I don't understand why it fails. I > doubt a Cisco router is to blame here because ns1 and ns2 are two guests of > the

Re: random latency in named

2015-05-21 Thread Charles Swiger
Hi, Mathew-- On May 21, 2015, at 3:01 PM, Mathew Ian Eis wrote: > Hi BIND, > > I’ve been trying to track down the source of random latency in our production > servers, without much luck. At random intervals - several times an hour - > named appears to suddenly stop processing queries for aroun

Re: Problem with BIND 9.10.1-P1 recursion limits

2014-12-09 Thread Charles Swiger
Hi-- On Dec 9, 2014, at 12:04 PM, Mike Hoskins (michoski) wrote: > Wanted to point out that (perhaps sadly) this isn't so crazypants...or at > least not uncommon. The *edge* and *aka* references speak Akamai DNS+CDN. > From my last overview, this has gotten cleaner in the latest versions of > th

Re: Diagnostic help part 2

2014-09-30 Thread Charles Swiger
Hi-- On Sep 30, 2014, at 1:59 PM, Bill Christensen wrote: > Fair enough. > > Africabound.org > SustainableSources.com > > The server that's giving problems is ns1.sustainablesources.com > 205.238.182.102 Your 102 box doesn't seem responding to 53/udp or 53/tcp from the outside: http://w

Re: no servers found

2014-08-19 Thread Charles Swiger
Hi-- On Aug 19, 2014, at 1:47 PM, "Adamiec, Lawrence" wrote: > I am running BIND 9.6-ESV-R5-P1 on a Solaris 10 server. I can run queries > without specifying a name server on my Solaris servers successfully. When I > try to run a query on a Solaris 10 virtual server, I get "connection timed

Re: classless ptr setup

2014-01-20 Thread Charles Swiger
Hi-- On Jan 20, 2014, at 10:43 AM, Jim Pazarena wrote: > I have a full /24, which I would like to separate into two /25's, and > assign each half to two of my customers. The snag is that *I* maintain > the DNS for each of these customers. > > Is it possible to create the classless setup within m

Re: Performance Tuning RHEL 5 and Bind

2013-10-28 Thread Charles Swiger
Hi— On Oct 28, 2013, at 9:05 PM, Alan Clegg wrote: > Slave X.internal.example.com +1; it’s also worth looking into why there is such a high volume of DNS queries. Is it simply a big network with a lot of chatty clients? Or is TTL turned down so low that client side caching is not effective and

Re: Dig gives ;; connection timed out; no servers could be reached

2013-10-02 Thread Charles Swiger
Hi-- On Oct 2, 2013, at 9:18 PM, Balanagaraju Munukutla <9ba...@sg.ibm.com> wrote: > Any one could help on the error below. > > [andrew@oc8163211842 ~] $ dig @.com abcd.com.sg mx > > ; <<>> DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5 <<>> @x.com abcd.com.sg mx > ; (1 server found) > ;; global

Re: weird perfmonce BIND version 9.6

2013-09-25 Thread Charles Swiger
Hi-- On Sep 25, 2013, at 12:22 PM, IT Support wrote: > Hi charles I'm "Chuck", although I've also answered to worse things than my full name. :-) > this is what i get from dig > > dig host2.mydomain.com > > ; <<>> DiG 9.6-ESV-R4 <<>> ost2.mydomain.com > ;; global options: +cmd > ;; Got ans

Re: RFC requirements for relative CNAME targets?

2013-07-18 Thread Charles Swiger
On Jul 18, 2013, at 1:18 PM, John Miller wrote: > I know that for the following record in example.com's zone file: > > host.example.com. IN CNAME otherhost > > BIND will return: > > host.example.com. IN CNAME otherhost.example.com. Assuming $ORIGIN is set to example.com, but yes. > Is this

Re: Reverse address entries

2013-06-28 Thread Charles Swiger
On Jun 28, 2013, at 10:54 AM, "Ward, Mike S" wrote: > Hello all, is there any reason to setup reverse address entries for a zone? Certainly. Various software performs what's called a double-reverse lookup to confirm that the A and PTR records match. > I have asked some of the admins here and th

Re: PTR files

2013-06-17 Thread Charles Swiger
On Jun 17, 2013, at 3:00 PM, Norman Fournier wrote: > [ ... ] > (...Members of the httpd-users list says the same thing - its not an httpd > problem. >From what you've said below, they're quite right. > I am just trying to take possibilities off my list of potential errors, sorry > if I am ann

Re: PTR files

2013-06-17 Thread Charles Swiger
On Jun 17, 2013, at 2:21 PM, Norman Fournier wrote: > I am working on bringing a virtual webserver behind a router online and am > encountering problems. OK. The odds are very good that you should ask about this on an Apache/nginx/etc forum, as it's unlikely to be related to DNS or BIND. > In

Re: What happens when one out of three NSs are down?

2013-06-11 Thread Charles Swiger
On Jun 11, 2013, at 4:12 PM, Gary Wallis wrote: > DNS experts: > > What really happens in the real world when 1 out of three authoritative NSs > are down for 30 minutes due to a datacenter outage? Properly functioning nameservers will note that queries sent to the NS which is down aren't getti